Displaying 5 results from an estimated 5 matches for "sec_error_unknown_issu".
Did you mean:
sec_error_unknown_issuer
2019 Aug 29
2
I broke "yum update" - C7
Am 2019-08-29 17:36, schrieb Gary Stainburn:
> On Thursday 29 August 2019 16:20:00 Alexander Dalloz wrote:
>> Hi,
>>
>> yum uses libcurl behind the scenes and thus NSS and not OpenSSL.
>>
>> Do you get something indicative when running:
>>
>> URLGRABBER_DEBUG=1 yum --disablerepo=\* --enablerepo=webtatic
>> check-update
>>
>>
2019 Aug 30
0
I broke "yum update" - C7
...=*.fedoraproject.org,O=Red Hat Inc.,L=Raleigh,ST=North
Carolina,C=US
* start date: Feb 01 00:00:00 2017 GMT
* expire date: May 01 12:00:00 2020 GMT
* common name: *.fedoraproject.org
* issuer: CN=DigiCert SHA2 High Assurance Server
CA,OU=www.digicert.com,O=DigiCert Inc,C=US
* NSS error -8179 (SEC_ERROR_UNKNOWN_ISSUER)
* Peer's Certificate issuer is not recognized.
* Closing connection 29
2019-08-29 17:23:18,117 exception: [Errno 14] curl#60 - "Peer's
Certificate issuer is not recognized."
2019-08-29 17:23:18,117 retrycode (14) not in list [-1, 2, 4, 5, 6, 7],
re-raising
Based on that it a...
2019 Aug 30
4
I broke "yum update" - C7
On 8/30/19 5:52 AM, Gary Stainburn wrote:
> Incidentally, the*good* server that I was referencing my broken server against has decided to start giving the curl certificate errors in the same way that the broken one did. Very strange. I ran
It's possible that the error is unrelated to the ca-certificates file.?
You'll only see it if yum selects a mirror that uses a Let's Encrypt
2019 Aug 29
0
I broke "yum update" - C7
...CN=*.fedoraproject.org,O=Red Hat Inc.,L=Raleigh,ST=North Carolina,C=US
* start date: Feb 01 00:00:00 2017 GMT
* expire date: May 01 12:00:00 2020 GMT
* common name: *.fedoraproject.org
* issuer: CN=DigiCert SHA2 High Assurance Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US
* NSS error -8179 (SEC_ERROR_UNKNOWN_ISSUER)
* Peer's Certificate issuer is not recognized.
* Closing connection 29
2019-08-29 17:23:18,117 exception: [Errno 14] curl#60 - "Peer's Certificate issuer is not recognized."
2019-08-29 17:23:18,117 retrycode (14) not in list [-1, 2, 4, 5, 6, 7], re-raising
One of the configu...
2019 Aug 29
3
I broke "yum update" - C7
...c.,L=Raleigh,ST=North
> Carolina,C=US
> * start date: Feb 01 00:00:00 2017 GMT
> * expire date: May 01 12:00:00 2020 GMT
> * common name: *.fedoraproject.org
> * issuer: CN=DigiCert SHA2 High Assurance Server
> CA,OU=www.digicert.com,O=DigiCert Inc,C=US
> * NSS error -8179 (SEC_ERROR_UNKNOWN_ISSUER)
> * Peer's Certificate issuer is not recognized.
So here we are.
While the current ca-certificates package of CentOS 7
ca-certificates-2018.2.22-70.0.el7_5.noarch does not hold the
intermediate certificate "DigiCert SHA2 High Assurance Server" I don't
get that issue.
#...